Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer (raw, json)
Hash identifier: ZRhlh5EcZAmsmm5b5xw7CW9Y58uwFHIUxtw5FlGT1eY=
Subject key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F029DB88AFE2B193E3333A04B9F8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.222.208.0/21
IP: 45.94.112.0/22
IP: 185.34.220.0/22
IP: 185.78.164.0/22
IP: 185.82.88.0/22
IP: 185.251.21.0/24
IP: 212.80.212.0/22
IP: 2a04:6280::/29
IP: 2a09:5800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:9d:b8:8a:fe:2b:19:3e:33:33:a0:4b:9f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:9c:12:37:5a:fd:64:70:a1:7e:7a:58:25:
fd:5d:36:c1:05:75:49:5e:ca:eb:3c:42:dc:1b:38:
e1:9c:72:58:4f:00:2a:26:f3:72:01:8a:a0:57:a1:
cd:b1:fe:98:e2:17:ce:93:74:0d:01:db:91:c5:ca:
c1:f0:ba:e3:62:71:6b:8e:74:0c:1f:45:6b:75:56:
4d:11:23:4e:f3:84:6a:a3:9a:72:c7:31:2d:a8:f8:
df:6d:6c:96:6c:fd:84:e7:c5:df:08:bb:cc:fc:41:
23:f7:6e:4c:03:5d:7b:2f:00:a1:57:12:aa:8a:92:
2e:12:60:74:09:48:af:20:7f:89:55:e6:8a:45:fa:
81:30:f4:11:fd:78:40:62:0e:94:c7:61:bc:1d:b2:
1f:d0:3f:07:97:90:d8:ea:ef:a1:5e:a0:e7:28:49:
1f:1f:d0:0d:2a:3a:13:e8:cf:c9:de:f4:60:a4:ec:
6b:9f:9d:6c:9c:c8:d4:52:b4:63:cf:0d:90:ef:ef:
31:1d:7b:1f:67:7e:41:18:11:5e:bf:5f:e1:c0:f6:
41:5e:9b:1b:23:71:76:6f:15:de:e3:85:7d:85:b7:
18:f6:37:61:be:0d:29:74:7c:f9:4a:30:47:06:93:
e9:9d:73:e9:32:74:76:d3:be:e1:89:21:26:09:79:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.208.0/21
45.94.112.0/22
185.34.220.0/22
185.78.164.0/22
185.82.88.0/22
185.251.21.0/24
212.80.212.0/22
IPv6:
2a04:6280::/29
2a09:5800::/29
Signature Algorithm: sha256WithRSAEncryption
a3:da:c4:f1:f1:c3:2d:2f:1c:9e:b4:bc:ee:dc:8d:b0:65:e3:
8f:7a:13:fc:5e:cb:94:83:4e:c6:3f:69:10:8c:a1:ee:04:93:
7d:a5:d1:71:d9:7a:a5:b9:e0:6a:d2:1f:7a:78:c8:d6:39:3a:
bc:ec:a3:6a:e0:7a:f3:b5:f1:da:1a:8d:58:9d:47:88:a4:67:
c8:ab:fc:18:d3:36:9b:47:1c:0c:51:a8:f7:71:cd:0d:93:98:
e2:11:7f:f8:d7:d0:9d:f7:89:4e:18:38:d1:13:3a:28:27:76:
f7:dc:6d:6c:ef:de:7d:66:c7:32:53:a7:54:32:9a:57:40:28:
8f:a0:a8:74:38:2f:47:ac:cc:9b:94:8c:93:de:e5:82:3a:14:
91:34:3f:2e:c6:0d:f4:53:36:68:36:f4:60:39:34:cb:5c:ab:
a2:be:05:31:03:1d:01:ef:ba:66:94:97:5f:cf:e6:90:2d:84:
bb:fe:f3:bc:4c:91:da:e1:20:2e:31:9b:e7:dd:48:05:fd:87:
cd:63:fc:8e:c8:fc:3a:ca:4f:19:92:39:24:cf:30:29:86:ef:
9e:ad:e1:6a:1d:bc:08:bc:a0:a5:95:15:f6:ac:23:7e:85:4c:
2a:90:d0:d3:52:c1:bf:54:04:09:84:01:5c:a0:74:4f:6f:2e:
47:93:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:04 2025 by rpki-client